SUSE/aimaas

The `SUPERUSER` permission set on groups has no effect

Closed this issue · 0 comments

In the function auth.crud.has_permission is a bug.

It only considers the PermissionType.SUPERUSER granted directly to users. If the permission is inherited from a group, it has no effect.